Vues — Privacy Policy

Last updated: October 22, 2026

This policy explains what data Vues collects and how it is used, including the data received through Google Sign-In, Sign in with Apple, TikTok Login Kit and TikTok's Display API.

1. What Vues collects

• Account data: the display name you choose (or the name Google supplies), a handle and a generated internal id. If you sign up with a password, we store a salted scrypt hash — never the password itself.
• Google sign-in data: if you use “Continue with Google”, we receive your Google account id (the stable sub claim), email address, email-verified status, display name and profile picture URL. We use the email only to link your account and for security notices; it is never shown on your public profile. We request the basic openid email profile scopes only: Vues cannot read your Gmail, Drive, YouTube history or contacts.
• Apple sign-in data: if you use “Continue with Apple”, we receive your Apple account id (the stable sub claim), the email address Apple shares (which may be a private relay address such as @privaterelay.appleid.com), its verified status, and — only on the first authorization — the name you chose to share. We request the name email scopes only: Vues cannot read your Apple ID, purchases, iCloud or App Store history.
• Sign-in and device data: for each session we store the creation time, last activity, IP address and browser user-agent, so you can see and sign out devices you do not recognise. Session tokens are stored in your browser's local storage; the server stores only the session record.
• Content you post: video links, text posts, comments, likes, follows, friends and direct messages you send in Vues.
• Safety data: accounts you block and reports you file (the reported content, the reason and any details you add). Reports are visible only to the operator of this server.
• Linked platform handles: if you link a YouTube channel, Twitch, Kick or TikTok account, Vues stores that account's public handle, display name, avatar URL and profile URL so your profile can show it.
• TikTok authorization data (via Login Kit): if you connect your TikTok account, Vues receives your TikTok access and refresh tokens, your TikTok open id, your TikTok display name and avatar (basic profile info), and, with the video.list scope, metadata of videos you have posted on TikTok (title, description, cover image, duration). Video metadata from videos you own is used to show real titles and thumbnails on your posts, and to let you pick your own videos when composing a post.

2. What Vues does NOT do with your data

• Vues never reads your TikTok feed, your private videos, your followers or any other data beyond the basic profile info and your own public video metadata.
• Vues does not sell, rent or transfer your data to third parties. Platform data is used solely inside Vues to power the features you see.
• TikTok tokens are stored server-side and are never shared with other Vues users or any third party. Google sign-in returns an ID token that is verified and then discarded; no Google access or refresh token is stored.
• Your email address, IP addresses and session list are visible only to you and the server operator.

3. Third-party platform data

Vues calls public, documented APIs of YouTube, Twitch, Kick and TikTok to display video titles, thumbnails and stream status. Requests to these platforms are made server-side from Vues's backend using application credentials — your personal platform credentials are never sent to or through the app for these lookups. Your use of each platform remains governed by that platform's own terms and privacy policy.

4. Local processing and retention

During its closed beta, Vues stores account data in a SQLite database on the operator's self-hosted machine. Watch-party room state is held in memory. No analytics or advertising SDKs are included.

The operator keeps automated daily database backups. A backup can contain data you deleted after it was taken, and backups are pruned on a rolling basis (normally within 14 days). Backups are stored on the same machine or a storage location chosen by the operator and are not used for any purpose other than restoring the service.

Payment, credit and payout records are kept after account deletion where needed for accounting, tax and fraud-prevention obligations; they are separated from your profile and no longer include your name, email or content.

5. Your choices

• You can see and revoke signed-in devices, and sign out everywhere else, under Profile → Security & data.
• You can download a JSON copy of your data at any time from Security & data → Download my data.
• You can delete your account yourself from Security & data → Delete my account. Deletion removes your profile details, posts, comments, likes, follows, friendships, direct messages and sessions immediately. Some financial records are retained as described above.
• You can disconnect TikTok, YouTube, Twitch or Kick at any time in your profile; unlinking deletes the stored tokens and linked profile data for that platform.
• You can also email dablakboy973@gmail.com for access, correction or deletion help.

6. Safety and moderation

Blocking an account hides its posts and comments from you and prevents messages and friend requests in both directions. Reports are reviewed by the operator, who may remove content or suspend accounts that break the Terms of Service. Reports are retained while they are reviewed and for as long as needed to enforce those Terms.

7. Contact

Privacy questions or data-deletion requests: dablakboy973@gmail.com